CLAIMS : 

What is claimed is: 

A method of verifying the integrity of unauthenticated 
cod^ comprising: 

receiving automatically authenticated code, the 
automato^cally authenticated code including an embedded first hash 
value of the unauthenticated code; 

receiving the unauthenticated code; 

generating a second hash value of the unauthenticated 

code ; 

comparing N^he first hash value and the second hash 

value ; and 

verifying the \ntegrity of the unauthenticated code if 
the first hash value and t\e second hash value match. 

2. The method of claim TV wherein the automatically 
authenticated code is compiled JaSra code and wherein the 
unauthenticated code is native code^ 

3. The method of claim 1, wherei\ the automatically 
authenticated code is a Java application car applet and wherein 
the unauthenticated code is a dynamically linked library. 

4. The method of claim 1, wherein the frrst hash value is 
obtained using a hashing function and wherein generating a second 
hash value of the unauthenticated code includes us\ng the same 
hashing function as was used to obtain the first has\ value, 
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1 5.\ The method of claim 4, wherein the hashing function is 

2 identified based on information stored in the automatically 

3 authenticated code. 

1 6. \ The method of claim 1, further comprising: 

2 \xecuting the automatically authenticated code using a 

3 virtual machine; and 

^2 sen^ng a request to a server from which the 

1^ automatically authenticated code was received, the request being 

63 for the unauthent jbycated code . 

r \ 

7. The method\f claim 1, wherein, if the first hash value 

2 and the second hash varue do not match, the method further 
O \ 

3n comprises: \i 

|« receiving the un^lthenticated code again; 

0 generating a third\hash value of the unauthenticated 

6 code; and \ 

7 comparing the first hafeh value and the third hash 

8 value . \ 

1 8. The method of claim 7, wherMn if the third hash value 

2 and the first hash value do not match, \he method further 

3 comprises: \ 

4 comparing the second hash value aind the third hash 

5 value; and \ 

6 if the second hash value and the th\rd hash value 
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7 mAtch, determining that the unauthenticated code has been 

8 corrupted intentionally. 

1 9. \ The method of claim 8, wherein if the second hash value 

2 and the\third hash value do not match, it is determined that the 

3 unauthent\cated code has been corrupted unintentionally. 

1 10, The. method of claim 1, wherein the method is 

2^=, implemented in\a virtual machine associated with a web browser on 

3O a client device .\ 

in \ 
s \ 

[n \ 

11. An apparatus for verifying the integrity of 

unauthenticated code, ^s:omprising : 

3 a virtual macnine; and 

'^fi an unauthenticaued code verification element, wherein 

1^ the virtual machine receivesv. automatically authenticated code, 

Q the automatically authenticated code including an embedded first 
□ \ 

7 hash value of the unauthenticated code, and receives the 

8 unauthenticated code, and whereinX 

9 the unauthenticated code Verification element generates 

10 a second hash value of the unauthenticated code, compares the 

11 first hash value and the second hash value, and verifies the 

12 integrity of the unauthenticated code if Vhe first hash value and 

13 the second hash value match. \ 

1 12. The apparatus of claim 11, wherein tthe automatically 

2 authenticated code is compiled Java code and wherein the 
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3 linauthenticated code is native code. 

1 13 .\ The apparatus of claim 11, wherein the automatically 

2 authenticated code is a Java application or applet and wherein 

3 the una\ithenticated code is a dynamically linked library. 

1 14, Vhe apparatus of claim 11, wherein the first hash value 

2 is obtainedVsing a hashing function and wherein the 

3 unauthenticat^d code verification element generates a second hash 
43 value of the unSauthenticated code using the same hashing function 

as was used to obtain the first hash value. 

^ \ 

Ify 15. The apparaCsus of claim 14, wherein the hashing function 

il is identified by the imauthenticated code verification element 

based on information stols;^d in the automatically authenticated 

code . \ 

'm \ 

16. The apparatus of cla^ 11, wherein the virtual machine 

2 ■ executes the automatically authenticated code and 

3 sends a request to a server from wiich the automatically 

4 authenticated code was received, the^ request being for the 

5 unauthenticated code. \ 

1 17. The apparatus of claim 11, whervein, if the first hash 

2 value and the second hash value do not matoeh, the virtual machine 

3 receives the unauthenticated code again, thA unauthenticated code 

4 verification element generates a third hash va,lue of the 
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5 Vinauthenticated code and compares the first hash value and the 

6 txiird hash value 
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18. \ The apparatus of claim 17, wherein if the third hash 
value \and the first hash value do not match, the unauthenticated 
code verification element compares the second hash value and the 
third hask value and, if the second hash value and the third hash 
value matcnV determines that the unauthenticated code has been 
corrupted intentionally. 

19. The apparatus of claim 18, wherein if the second hash 
value and the thirov hash value do not match, the unauthenticated 
code verification element determines that the unauthenticated 
code has been corrupteci unintentionally. 

20. The apparatus of\ claim 11, wherein the virtual machine 
and the unauthenticated codey verification element are associated 
with a web browser on a clienK device . 



1 21. A computer program product in a computer readable 

2 medium for verifying the integrity \)f unauthenticated code, 

3 comprising: 

4 first instructions for receiVing automatically 

5 authenticated code, the automatically authenticated code 

6 including an embedded first hash value of the unauthenticated 

7 code ; 

8 second instructions for receivingX the unauthenticated 
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,code ; 

\ third instructions for generating a second hash value 

ofXthe unauthenticated code; 

\ fourth instructions for comparing the first hash value 

and tne second hash value; and 

\ fifth instructions for verifying the integrity of the 
unauthent\cated code if the first hash value and the second hash 
value matcns. 

22. The Computer program product of claim 21, wherein the 
automatically authenticated code is compiled Java code and 
wherein the unautBenticated code is native code. 

23. The compute\ program product of claim 21, wherein the 
automatically authenticVted code is a Java application or applet 
and wherein the unauthenticated code is a dynamically linked 
library. \ 

24. The computer progrart\product of claim 21, wherein the 
first hash value is obtained usrng a hashing function and wherein 
the third instructions for generating a second hash value of the 
unauthenticated code include instriifctions for using the same 
hashing function as was used to obtarn the first hash value. 

25. The computer program product ot claim 24, further 
comprising instructions for identifying tne hashing function 
based on information stored in the automatically authenticated 
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4 cbde . 

1 26. \ The computer program product of claim 21, further 

2 comprising: 

3 \ sixth instructions for executing the automatically 

4 authentiScated code using a virtual machine; and 

5 \seventh instructions for sending a request to a server 

6 from which Vhe automatically authenticated code was received, the 
7^==. request being, for the unauthenticated code. 

m \ 

£□ 27, The computer program product of claim 21, further 

I compr i s ing : \ 
m sixth instructions for receiving the unauthenticated 

4 code again, if the first hash value and the second hash value do 

not match; \ 
1^ seventh instructions for generating a third hash value 

13 of the unauthenticated code; and 

5" eighth instructions for comparing the first hash value 

9 and the third hash value. \ 

1 28. The computer program Vroduct of claim 27, further 

2 comprising: \ 

3 ninth instructions for comparing the second hash value 

4 and the third hash value, if the th\rd hash value and the first 

5 hash value do not match; and \ 

6 tenth instructions for detemining that the 

7 unauthenticated code has been corrupted Vntentionally, if the 
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seconcl hash value and the third hash value match. 

29. \The computer program product of claim 28, further 

comprising eleventh instructions for determining that the 
unauthenticat\d code has been corrupted unintentionally, if 
second hash valVie and the third hash value do not match. 
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